DSH Plugin Certification

io.github.PerryLinkPublished by GitHub account PerryLinkv0.2.13Updated Nov 5, 2026

Read-only MCP server exposing the dsh-plugin-certification registry for DeepSeek Harness plugins.

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Read-only MCP server that lets an assistant look up certification grades for DeepSeek Harness plugins in the public dsh-plugin-certification registry.

What you can do
  • Look up one plugin's certification record by GitHub owner and repository name, including letter grade, snapshot date and five-dimension evidence
  • List every plugin in the public registry with repository, grade and snapshot date, plus spec version, generation timestamp, total count and a coverage note
  • Read the certification specification: the five graded dimensions, the A-to-F grade scale and the veto rule that can override a grade
When to use it
Useful when you are choosing between DeepSeek Harness plugins and want an independent grade and its evidence, or when you need to interpret a grade you already saw, such as why a record was vetoed.
Requirements
Runs as a local stdio process installed from the npm package dsh-cert-mcp; no authentication, environment variables or headers are declared. Desktop-only; not available as a web executable.
Before you install
Read-only lookups only; it does not install or modify plugins. The registry is described as opt-in, so absence of a plugin does not mean it is uncertified, and grades reflect a snapshot date rather than current state.

Installation

In SourceWeft

  1. Open DSH Plugin Certification in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

3

get_certification

Get one plugin certification record

Return the certification record for ONE DeepSeek Harness plugin repository, identified by its GitHub owner and repository name: the letter grade, the snapshot date the grade was measured, and the five-dimension evidence behind it. Use this when you already know which plugin you are asking about and need its grade, or the reasoning that produced it. Use list_certified instead to enumerate every certified plugin, and certification_spec instead to learn what the five dimensions, the grade scale and the veto rule mean. Read-only: it reads a registry snapshot bundled with this server. When the public registry is reachable the snapshot may be refreshed opportunistically; otherwise the embedded snapshot is used. It performs no writes, contacts no service other than that optional refresh, and requires no credentials. Two calls with the same arguments return the same record. If the registry holds no entry for that owner/repo, the result is a plain not-found sentence naming the key it looked up and the snapshot date - it never invents, interpolates or approximates a grade.

Parametersreporequiredownerrequired

list_certified

List every certified plugin

List every plugin in the public dsh-plugin-certification registry, each with its repository, letter grade and snapshot date, plus the registry spec version, its generation timestamp and the total count. The returned `coverage` object states what that count is and is not: the registry is an opt-in subset of the ecosystem (a plugin appears only after it was evaluated), so a short list — the bundled snapshot holds one entry — is not evidence that the ecosystem is uncertified, and a single-entry list supports no comparison across plugins. Read `coverage` before drawing any conclusion from `count`. Use this to discover what is in the registry, or to compare grades across plugins. Use get_certification instead when you already know the plugin and want its full five-dimension evidence; this tool returns the summary row only. Read-only: it reads the embedded registry snapshot (optionally refreshed from the public registry when reachable), takes no parameters, performs no writes and needs no credentials. Repeated calls are identical until the snapshot is refreshed.

Takes no parameters.

certification_spec

Explain the certification spec

Return the dsh-plugin-certification specification document, version 1: the five graded dimensions, the grade scale from A to F, and the veto rule that can override a grade. Use this to interpret a grade you have already read - for example to learn why a record was vetoed, or what a dimension actually measures. Use list_certified or get_certification instead when you want a specific plugin's data rather than the rules behind it. Read-only: the document is compiled into the server, takes no parameters, performs no writes and needs no credentials. The same document is returned on every call.

Takes no parameters.

Version history

10
  1. v0.2.13LatestNov 5, 2026
  2. v0.2.12Nov 1, 2026
  3. v0.2.11Oct 31, 2026
  4. v0.2.10Oct 21, 2026
  5. v0.2.9Oct 20, 2026
  6. v0.2.6Oct 10, 2026
  7. v0.2.5Oct 9, 2026
  8. v0.2.4Oct 5, 2026
  9. v0.2.3Oct 5, 2026
  10. v0.2.2Sep 19, 2026

Score

65% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.